Question from a pen testing noob.